00. Profiling the Internet Connected Infrastructure of the Individuals on the U.S Sanctions 
List - An OSINT Analysis 
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We've decided to take a closer look at the Internet-connected infrastructure used by individuals 
on the most recently released U.S Sanctions List and offer additional insights into the 
infrastructure including to look for and provide actionable intelligence on their whereabouts. 


In this analysis we'll take a closer look at the Internet-connected infrastructure of individuals on 
the U.S Sanctions List and offer an in-depth discussion on the actual Internet-connected 
infrastructure. 


Sample emails known to have been used by individuals on the U.S Sanctions List: 
muhammadkhizarhayatjaffri@yahoo.com 
alimohsin228@gmail.com 
mohsinrazaamiri@gmail.com 
alimohsin228@yahoo.com 
forwarderzlive@google.com 
forwarderzlive@hotmail.com 
support@secondeyehost.com 
support@theoxytech.com 
Africonline@protonmail.com 
raza.zaidi92@yahoo.com 
info@anticrisis.cc 

s.alirz92@gmail.com 
support@secondeyesolution.com 
era_1@mil.ru 

forwarderz@yahoo.com 
info@mksofttech.com 
khizarh11@yahoo.com 
khizarhayat.jaffri@yahoo.com 
muhammadkhizar.hayatjaffri@yahoo.com 
mygreentree59@yahoo.com 
khizar14hayat@gmail.com 
mohsin@forwarderz.com 
amestypezx@yahoo.com 
syedaliraza940@gmail.com 
great_guy1102002@yahoo.com 
kool_boy92@hotmail.com 
mujtaba@forwarderz.com 


Sample related emails known to have been used in the past by the same individuals on 
the U.S Sactions List: 

shy4angels@gmail.com 

daniel@macbkk.com 

sam.stan26dish@gmail.com 

info@forwarderz.com 

threatcc@gmail.com 

shahzadsmb@gmail.com 


Sample domains known to have been registered by some of the individuals on the U.S 
Sanctions List: 

nuktal[.]tv 

hotistan[.Jcom 

twogoodrentacar[.]com 

hobxa[.]Jcom 


giscof[.]Jcom 
wattdt[.Jcom 

lilip[.Jnet 
buyonlinepakistan[.Jcom 
topasb[.]Jcom 
cuddlef[.Jcom 
modernlawatches[.]info 
webproapplication[.]com 
xalphamedia[.]info 
pstfu[.Jnet 
officenowease[.]info 
panameavenue[.]fr 
lastylefish[.Jinfo 
therfmediaconsulting[.Jcom 
1markseoJ.]info 


We'll continue monitoring the infrastructure used by the individuals on the most recently 
released U.S Sanctions List and will post additional updates as soon as new developoments 
take place. 


